Home

CVE-2020-23903

Description

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.129

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) libspeex1-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) libspeex1-32bit-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) libspeex1-debuginfo-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) libspeex1-debuginfo-32bit-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) libspeexdsp1-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) libspeexdsp1-debuginfo-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) speex-debuginfo-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
SUSE-SU-2021:3858-1(SUSE Linux Enterprise Server 12-SP5 ) speex-debugsource-1.1.999_1.2rc1-24.3.1.x86_64.rpmLinux
The Speex codec command line tools (USN-5280-1) speex_1.2~rc1.2-1ubuntu2.1_i386.debLinux
The Speex codec command line tools (USN-5280-1) speex_1.2~rc1.2-1ubuntu2.1_amd64.debLinux
The Speex codec command line tools (USN-5280-1) speex_1.2~rc1.2-1.1ubuntu1.20.04.1_i386.debLinux
The Speex codec command line tools (USN-5280-1) speex_1.2~rc1.2-1.1ubuntu1.20.04.1_amd64.debLinux
The Speex codec command line tools (USN-5280-1) speex_1.2~rc1.2-1.1ubuntu2_i386.debLinux
The Speex codec command line tools (USN-5280-1) speex_1.2~rc1.2-1.1ubuntu2_amd64.debLinux
(RHSA-2022:7979) speex security update speex-1.2.0-11.el9.i686.rpmLinux
(RHSA-2022:7979) speex security update speex-1.2.0-11.el9.x86_64.rpmLinux
(RHSA-2022:7979) speex security update speex-debugsource-1.2.0-11.el9.i686.rpmLinux
(RHSA-2022:7979) speex security update speex-debugsource-1.2.0-11.el9.x86_64.rpmLinux
speex security update (RLSA-2022:7979) speex-1.2.0-11.el9.i686.rpmLinux
speex security update (RLSA-2022:7979) speex-1.2.0-11.el9.x86_64.rpmLinux
Speex update (ELSA-2022-7979) speex-1.2.0-11.el9.i686.rpmLinux
Speex update (ELSA-2022-7979) speex-1.2.0-11.el9.x86_64.rpmLinux
Low: speex security update speex-1.2.0-11.el9.i686.rpmLinux
Low: speex security update speex-1.2.0-11.el9.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234